jochen ee2160d00c Drop every mesh-tools token by id when the forge holds two, and stop re-minting on every call (hq issue 739) ...

On 2026-10-14 from 22:28 local the forge held two tokens named mesh-tools.
gitea refuses a delete by such a name with 422 "multiple matches", so every
gitea tool call re-entered the mint, made two basic-auth calls that hash the
admin password, and failed: several times a minute, on a control-node that was
already overloaded, and mesh-delivery could read neither open pulls nor views.

The watcher and the tools run as separate bundles, so the in-process sharing
of one token source does not cover them; two mints racing leave two tokens by
the name, because the forge's check that a name is unused is not atomic.

A 422 on the delete by name now lists the account's tokens and drops each one
carrying the name by its id, then mints. A failed mint is not asked of the
forge again for 30 s: the same error is answered without a call.

2026-10-14 22:45:16 +02:00

..

announcing.test.ts

Count a ready mark only from a listed account, after the last push and the label (issue 722)

2026-10-14 21:45:39 +02:00

checks.test.ts

Cover a held merge only when the forge says a later delivered merge contains it (review of #150)

2026-10-09 02:57:18 +02:00

delivery.test.ts

Put the merge check back to pending before a recheck asks it (hq issue 305)

2026-10-08 10:11:26 +02:00

gate.test.ts

Route a recheck's pending through the gitea module's one writer of mesh/merge-gate

2026-10-12 12:20:23 +02:00

guard.test.ts

Serve the merge tool beside the one writer, and close the review's gaps

2026-10-12 17:46:39 +02:00

pages.test.ts

Name the package each controller-repository image compiles, and say a renamed file under both names (hq ADR 0267, issue 363)

2026-10-10 02:58:31 +02:00

paging.test.ts

Page the announcer through every open pull request updated since its last look

2026-10-12 20:52:27 +02:00

protection.test.ts

gitea: give the controller what it maps a pull request onto the graph with; set both check statuses; protect a branch by tool (hq ADR 0237)

2026-10-06 21:56:04 +02:00

pulls.test.ts

Say where a pending merge check is: queued since when, then building on which machine (hq issue 446)

2026-10-11 03:14:06 +02:00

rule-cases.json

guard.ts: cover every branch for a rule Go's regexp reads otherwise, and hold both matchers to one table (issue 539)

2026-10-12 12:51:22 +02:00

secret-setting.test.ts

Keep every password, token and API key the vault's, never a setting (hq issue 342)

2026-10-13 07:32:19 +02:00

teams.test.ts

lab: a read-only forge account of its own, and no credential left on disk after a stop (hq issue 624, review 196)

2026-10-13 14:00:59 +02:00

token.test.ts

Drop every mesh-tools token by id when the forge holds two, and stop re-minting on every call (hq issue 739)

2026-10-14 22:45:16 +02:00

trunk.test.ts

Give the build agent a judge cache of its own, and prove a release branch's move puts its verdicts out of date

2026-10-14 13:48:30 +00:00

webhook.test.ts

Say every forge event on the bus through a signed system webhook, and announce a head or merge at once (novox/hq issue 729)

2026-10-14 22:21:22 +02:00